{"action":"Upgrade select2 to 4.0.6 or later.","affected":[{"fixed":"4.0.6","introduced":"0"}],"component":"select2","cve_ids":["CVE-2016-10744"],"ecosystem":"npm","epss":0.01762,"exploited":false,"fixed_versions":["4.0.6"],"ghsa_id":"GHSA-rf66-hmqf-q3fc","id":"tcs_01M5KG8WZEW6PW0JY6VR64Q6RZ","modified_at":"2026-09-10T03:49:40.371507194Z","published_at":"2022-05-14T01:14:56Z","references":["https://osv.dev/vulnerability/GHSA-rf66-hmqf-q3fc","https://nvd.nist.gov/vuln/detail/CVE-2016-10744","https://github.com/select2/select2/issues/4587","https://github.com/snipe/snipe-it/pull/6831","https://github.com/snipe/snipe-it/pull/6831/commits/5848d9a10c7d62c73ff6a3858edfae96a429402a","https://github.com/select2/select2"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-rf66-hmqf-q3fc","url":"https://osv.dev/vulnerability/GHSA-rf66-hmqf-q3fc"}],"summary":"Improper Neutralization of Input During Web Page Generation in Select2"}